Forum Discussion

ghost-rider_124's avatar
ghost-rider_124
Icon for Nimbostratus rankNimbostratus
Feb 24, 2015

ASM policy not learning anything !!

Hello Experts

 

I am really struggling with ASM policy creation. I created the ASM policy using automatic (recommended). Now I am browsing application means opens the application in browser, putting username/password and login, click links on the page. I did couple of times in 1 day.

 

BUT policy builder is showing, it learn 0 URL, 0 file types and 0 parameters !! I am not sure what I am missing here. The questions are:

 

1- Staging period was set to 7 days by itself. How many times per day, I need to browse the application for ASM to learn. I am sure I did it 4-5 times in one day but no learning. Is there any setting if I browse the application each time, it should learn? 2- Can we change the staging period to less than 7 like 3 days and browse the application many times to learn in 3 days.

 

Appreciated your input !

 

Please note that, I am doing SSL offloading on F5 but F5 to server its http

 

ASM Advanced WAF
deployment
security

5 Replies

Sort By
  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    Feb 24, 2015

    Ghost-rider,

     

    You might want to add your IP address as a trusted IP address. Not in front of my ASM to confirm where you do this but this will help you populate the policy. The metrics are v high for untrusted IPs.

     

    Hope this helps,

     

    N

     

  • ghost-rider_124's avatar
    ghost-rider_124
    Icon for Nimbostratus rankNimbostratus
    Feb 25, 2015

    Thanks Nathan. But unfortunately I have 11.2.1 version, that is showing only slider for learning speed.

     

    I want to learn fast so I have to make the slider at the last means opposite to Medium?

     

    • nathe's avatar
      nathe
      Icon for Cirrocumulus rankCirrocumulus
      Feb 25, 2015
      I think you have to click on Advanced to see the rules, the default is the Basic view.
  • ghost-rider_124's avatar
    ghost-rider_124
    Icon for Nimbostratus rankNimbostratus
    Feb 25, 2015

    Hi Nathan

     

    Thanks. But there is no advanced view. I just got below. I do not have any advance view. The article you refer, is showing applicable to 11.4. I have 11.2.1 I am not sure if I am missing any thing